U.S. Department of Justice 

INTERPOL Washington 
U.S. National Central Bureau 



Washington, DC 20530 


JUL 0 8 2019 

FOIA #2019-168 


Emma Best 
MuckRock News 
Dept MR 74402 
411A Highland Avenue 
Somerville, MA 02144 


Dear Ms. Best: 

This is in response to your Freedom of Information request dated May 30, 2019, to 
Interpol Washington, U.S. National Central Bureau (USNCB), pursuant to the Freedom of 
Information Act (FOIA) requesting the following: 

Documents mentioning or relating to Anonymous (the hacker movement/collective, see 
below) or hacktivism (defined as hacking as a form of protest and/or activism) generated 
between 1 January 2009 and 1 January 2019, including but not limited to: 

* Internal reports, bulletins, warnings and alerts relating to Anonymous or hacktivism 

* Reports from the appropriate IT (Information Technology) or computer offices 
regarding possible cyber attacks by Anonymous or other hacktivists 

* Reports, bulletins, warnings and alerts relating to or mentioning Anonymous or 
hacktivism sent to or received from any federal law enforcement or intelligence agencies 
or any fusion center 

* Incident reports investigating possible hacking activity falling within the office's 
jurisdiction and allegedly carried out by members of Anonymous or other hacktivist 
groups 

* Materials generated as a result of any suspected or actual compromise, breach or "dox" 
(revealing of personal or private information) by Anonymous or other hacktivists. 

We received your request on May 30, 2019. Please refer to the above FOIA number 
assigned to your request in any additional correspondence. The USNCB has adopted a "multi¬ 
track processing" of FOIA requests based on the estimated amount of work and time needed to 
process the request. The criteria for assignment to a specific track can be found in the 
Department of Justice FOIA Regulations at 28 C.F.R. § 16.5(b). Your request has been assigned 
to the simple track. 



For your information, Congress excluded three discrete categories of law enforcement 
and national security records from the requirements of the FOIA. See 5 U.S.C. § 552(c). This 
response is limited to those records that are subject to the requirements of the FOIA. This is a 
standard notification that is given to all our requesters and should not be taken as an indication 
that excluded records do, or do not, exist. 

A search of the INTERPOL Washington indices located materials responsive to your 
request. We are releasing 22 pages with partial deletions pursuant to Title 5, United States Code, 
Section 552 (b)(6), (b)(7)(C), and (b)(7)(D) of the FOIA. 

Exemption (b)(6) concerns material the release of which would constitute a clearly 
unwarranted invasion of personal privacy of third parties. 

Exemption (b)(7)(C) of the FOIA relates to records or information compiled for law 
enforcement purposes only to the extent that the production of such law enforcement records or 
information, if disclosed, could reasonably be expected to constitute an invasion of personal 
privacy. The types of documents and/or information we have withheld could consist of names, 
addresses, identification numbers, telephone numbers, fax numbers, or various other documents 
that are considered personal. 

Exemption (b)(7)(D) provides protection for records or information that could reasonably 
be expected to disclose the identity of a confidential source, including a state, local, or foreign 
agency or authority or any private institution which furnished information on a confidential 
basis, and, in the case of a record or information compiled by a criminal law enforcement 
authority in the course of a criminal investigation, information furnished by a confidential 
source. 


46 pages concern the U.S. Department of Justice, Federal Bureau of Investigation (FBI). 
The USNCB is referring these documents FBI for determination of releasability in accordance 
with the FOIA. You may expect a determination from the FBI concerning your request. 

Information originating with INTERPOL, the International Criminal Police Organization, 
with its headquarters in Lyon, France, and foreign National Central Bureaus is provided to the 
USNCB pursuant to resolutions adopted by INTERPOL in 1974 and 1988, and the information is 
provided to USNCB with an understanding that it is for law enforcement purposes only. 

The remaining 16 pages originated with a INTERPOL and foreign National Central 
Bureaus and are being withheld in full, pursuant to Exemption (b)(7)(D). 

For your information, the United States Department of Justice, Justice Management 
Division, Office of the Chief Information Officer provides leadership and oversight of the 
Department’s information and technology programs. Based on the type of records that you 
appear to be seeking, you might wish to make a request to Justice Management Division for the 
records that you seek. 


If you are not satisfied with INTERPOL Washington’s determination in response to this 
request, you may administratively appeal by writing to the Director, Office of Information Policy 
(OIP), United States Department of Justice, Suite 11050, 1425 New York Avenue, NW, 
Washington, DC 20530-0001, or you may submit an appeal through OIP's FOIAonline portal by 
creating an account on the following website: 

https://www.foiaonline.gov/foiaonline/action/public/home . Your appeal must be postmarked or 
electronically transmitted within 90 days of the date of my response to your request. If you 
submit your appeal by mail, both the letter and the envelope should be clearly marked "Freedom 
of Information Act Appeal." 

Additionally, you may contact the Office of Government Information Services (OGIS) at 
the National Archives and Records Administration to inquire about the FOIA mediation services 
they offer. The contact information for OGIS is as follows: Office of Government Information 
Services, National Archives and Records Administration, 8601 Adelphi Road-OGIS, College 
Park, Maryland 20740-6001, e-mail at ogis@nara.gov ; telephone at 202-741-5770; toll free at 1- 
877-684-6448; or facsimile at 202-741-5769. 

You may contact the INTERPOL Washington FOIA Requester Service Center, as well as 
our FOIA Public Liaison, for any further assistance and to discuss any aspect of your request. 


Our contact information is as follows: INTERPOL Washington, U.S. Department of Justice, 
Washington, DC 20530-0001, Attention: Office of General Counsel, Tel.: 202-616-0201, Email: 
Interpol-USNCB.FOIA@usdoi.gov . 



Sincerely, 


KevinH. Smith 
General Counsel 


Enclosures 
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PRIORITY: 

DATE: 

FROM: 

Urgent 

28 February 2012 

Interpol Washington 


TO: 

(b)(7)d 


OUR REF: 

2012020691 c| (b)(6),(b)(7)(c) 

SUBJECT: 

***FLASH***: Operation Unmask - 

Colleagues, 




"Anonymous” hackers arrested 


IP Washington is highly interested in the below mentioned article regarding the arrest of 25 suspected members of the 
hacker group "Anonymous”. We would greatly appreciate any additional information your office can provide regarding 
this operation (confirmation of the arrests; obtain names/biodata of those arrested; places of arrest; etc): 

BEGIN 

"(AFP) Lyon, France - Interpol has arrested 25 suspected members of the 'Anonymous 1 hackers group in a swoop 
covering more than a dozen cities in Europe and Latin America, the global police body said Tuesday. 

"Operation Unmask was launched in mid-February following a series of coordinated cyber-attacks originating from 
Argentina, Chile, Colombia and Spain," said Interpol, based in the French city of Lyon. 

The statement cited attacks on the websites of the Colombian Ministry of Defence and the presidency, as well as on 
Chile's Endesa electricity company and its National Library, among others. 

The operation was carried out by police from Argentina, Chile, Colombia and Spain, the statement said, with 250 items 
of computer equipment and mobile phones seized in raids on 40 premises in 15 cities. 

Police also seized credit cards and cash from the suspects, aged 17 to 40. 

"This operation shows that crime in the virtual world does have real consequences for those involved, and that the 
Internet cannot be seen as a safe haven for criminal activity," said Bemd Rossbach, Interpol's acting director of police 
services. 

However, it was not clear what evidence there was to prove those arrested were part of Anonymous, an extremely 
loose-knit international movement of online activists, or "hacktivists." 

Spanish police said earlier they had arrested four suspected hackers accused of sabotaging websites and publishing 
confidential data on the Internet. 

They were accused of hacking the websites of political parties and companies and adding fangs to the faces of leaders 
in photographs online, and publishing data identifying top officials 1 security guards, Spanish police said. 

The operation, carried out after trawling through computer logs in order to trace IP addresses, also netted 10 suspects 
in Argentina, six in Chile and five in Colombia, Spanish police said. 

They said one of the suspects went by the nicknames Thunder and Pacotron and was suspected of running the 
computer network used by Anonymous in Spain and Latin America, via servers in the Czech Republic and Bulgaria. 

He was arrested in the southern Spanish city of Malaga. 

Two of the suspects were in detention while one was bailed and the fourth was a minor who was left in the care of his 
parents. 

In Santiago, deputy prefect Jaime Jara said police confiscated computer equipment belonging to five Chileans and a 
Colombian, aged between 17 and 23. 

Jara said the suspects appeared to have hacked web pages in Chile, Colombia and Spain. 

The six suspects did not know each other and were released after voluntarily giving statements, police said, though 
they will likely be ordered to appear in court to face possible charges relating to online crimes. 
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Anonymous has in recent weeks targeted the websites of a series of police organisations, with subgroup "Antisec" on 
Friday vandalising the website of a major US prison contractor. 

Anonymous took credit Thursday for an online raid on the Los Angeles Police Canine Association and previously 
attacked websites of the Central Intelligence Agency and the Federal Bureau of Investigation. 

Anonymous has notably defended WikiLeaks when it was facing a funding cutoff and recently collaborated with the 
anti-secrecy site for the release of a swathe of emails from Texas-based private intelligence firm Stratfor. 

In December 2010, Anonymous attacked the websites of Mastercard, PayPal, Visa and others for blocking donations 
to WikiLeaks after it began releasing thousands of classified US diplomatic cables." 

END 

Regards, 

IP Washington 


Thism&S^oeand any attachments contain sensitiv^p#^ffforcement information that 
should be pro!@ftfc«^rom unauthorized acceg^rtflrtJsed only for law enforcement 
purposes. Any furtheflftS«^ 4 ^tiofyjyw^Tiessage and any attachments is 
restricted to official law en^^^MfOuthorities for legitimate law 
enforcement puipos^s^flyother distPlft&ti^tLpf this information without the 
consent qfjyp^ltffSTN^C.B. is prohibited. 
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PRIORITY: 

DATE: 

FROM: 


Urgent 

29 February 2012 
Interpol Washington 


TO: 

((b)(6), (b)(7)c 



OUR REF: 

2012020691C 


(b)(6),(b)(7)(c) 

SUBJECT: 

***FLASH***: 

Operation Unmask - "Anonymous" hackers arrested 


(b)(6),(b)(7)(c) 


Thank you so much for the phone call. 


IP Washington is highly interested in the below mentioned article regarding the arre st of 25 suspected members of the 
hacker group ’'Anonymous". We would greatly appreciate any additional information ! [ can provide at this i b >< 7 >i d > 

point regarding Operation Unmask, such as confirmation of the arrests, the names/identities of those arrested and nt * rp ° a ngton 
related biometrics, as well as the locations of the arrests. 

Thank you, as always, and in any reply please quote our reference number: 20120206910. 

Warm regards, 


[b)(6), (b)(7)c 


Supervisory Analyst 


Operations and Command Center 


IP Washington 


* BEGIN ARTICLE* 

"(AFP) Lyon, France - Interpol has arrested 25 suspected members of the ’Anonymous’ hackers group in a swoop 
covering more than a dozen cities in Europe and Latin America, the global police body said Tuesday. 

"Operation Unmask was launched in mid-February following a series of coordinated cyber-attacks originating from 
Argentina, Chile, Colombia and Spain," said Interpol, based in the French city of Lyon. 

The statement cited attacks on the websites of the Colombian Ministry of Defence and the presidency, as well as on 
Chile's Endesa electricity company and its National Library, among others. 

The operation was carried out by police from Argentina, Chile, Colombia and Spain, the statement said, with 250 items 
of computer equipment and mobile phones seized in raids on 40 premises in 15 cities. 

Police also seized credit cards and cash from the suspects, aged 17 to 40. 

"This operation shows that crime in the virtual world does have real consequences for those involved, and that the 
Internet cannot be seen as a safe haven for criminal activity," said Bernd Rossbach, Interpol's acting director of police 
services. 

However, it was not clear what evidence there was to prove those arrested were part of Anonymous, an extremely 
loose-knit international movement of online activists, or "hacktivists." 

Spanish police said earlier they had arrested four suspected hackers accused of sabotaging websites and publishing 
confidential data on the Internet. 

They were accused of hacking the websites of political parties and companies and adding fangs to the faces of leaders 
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in photographs online, and publishing data identifying top officials' security guards, Spanish police said. 

The operation, carried out after trawling through computer logs in order to trace IP addresses, also netted 10 suspects 
in Argentina, six in Chile and five in Colombia, Spanish police said. 

They said one of the suspects went by the nicknames Thunder and Pacotron and was suspected of running the 
computer network used by Anonymous in Spain and Latin America, via servers in the Czech Republic and Bulgaria. 

He was arrested in the southern Spanish city of Malaga. 

Two of the suspects were in detention while one was bailed and the fourth was a minor who was left in the care of his 
parents. 

In Santiago, deputy prefect Jaime Jara said police confiscated computer equipment belonging to five Chileans and a 
Colombian, aged between 17 and 23. 

Jara said the suspects appeared to have hacked web pages in Chile, Colombia and Spain. 

The six suspects did not know each other and were released after voluntarily giving statements, police said, though 
they will likely be ordered to appear in court to face possible charges relating to online crimes. 

Anonymous has in recent weeks targeted the websites of a series of police organisations, with subgroup "Antisec" on 
Friday vandalising the website of a major US prison contractor. 

Anonymous took credit Thursday for an online raid on the Los Angeles Police Canine Association and previously 
attacked websites of the Central Intelligence Agency and the Federal Bureau of Investigation. 

Anonymous has notably defended WikiLeaks when it was facing a funding cutoff and recently collaborated with the 
anti-secrecy site for the release of a swathe of emails from Texas-based private intelligence firm Stratfor. 

In December 2010, Anonymous attacked the websites of Mastercard, PayPal, Visa and others for blocking donations 
to WikiLeaks after it began releasing thousands of classified US diplomatic cables." 

* END ARTICLE* 
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PRIORITY: 

DATE: 

FROM: 

TO: 

OUR REF: 
SUBJECT: 


Urgent 


29 February 2012 
Interpol Washington 


fb mw 


20120206910 | | < b >< 6 >-< b >l 7 l< c > 

***FLASH***: Operation Unmask - 


"Anonymous" hackers arrested 


UPDATE 


Greetings, ( b )( 7 ) d 


Please be advised that AD |( b )( 6 ). ( b )( 7 )c [ has contacted IP Washingono and provided p reliminary information on 


Operation Unmask. He indicated that we could contact him further while inp)( 7 )d 
additional questions. 


by mobile, if we had any 


Thank you to all at ( b X 7 ) d for their assistance with this matter, as we are greatly appreciative. 
Regards, 

IP WASHINGTON 


***** previous message follows ***** 

PRIORITY: Urgent 
DATE: 28 February 2012 
FR OM: Interpol Washington 
TO.'lfhX 7 ^ 

OUR REF: 201202069l d 1 (b,(6Mb)<7)(e) 

SUBJECT: ***FLASH***: Operation Unmask - "Anonymous" hackers arrested 
Colleagues, 

IP Washington is highly interested in the below mentioned article regarding the arrest of 25 suspected members of the 
hacker group "Anonymous". We would greatly appreciate any additional information your office can provide regarding 
this operation (confirmation of the arrests; obtain names/biodata of those arrested; places of arrest; etc): 


BEGIN 

"(AFP) Lyon, France - Interpol has arrested 25 suspected members of the ’Anonymous’ hackers group in a swoop 
covering more than a dozen cities in Europe and Latin America, the global police body said Tuesday. 

"Operation Unmask was launched in mid-February following a series of coordinated cyber-attacks originating from 
Argentina, Chile, Colombia and Spain," said Interpol, based in the French city of Lyon. 

The statement cited attacks on the websites of the Colombian Ministry of Defence and the presidency, as well as on 
Chile's Endesa electricity company and its National Library, among others. 

The operation was carried out by police from Argentina, Chile, Colombia and Spain, the statement said, with 250 items 
of computer equipment and mobile phones seized in raids on 40 premises in 15 cities. 


Police also seized credit cards and cash from the suspects, aged 17 to 40. 

"This operation shows that crime in the virtual world does have real consequences for those involved, and that the 
Internet cannot be seen as a safe haven for criminal activity," said Bernd Rossbach, Interpol's acting director of police 
services. 


However, it was not clear what evidence there was to prove those arrested were part of Anonymous, an extremely 
loose-knit international movement of online activists, or "hacktivists." 


(b)(SMb)(7)(c) 
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Spanish police said earlier they had arrested four suspected hackers accused of sabotaging websites and publishing 
confidential data on the Internet. 

They were accused of hacking the websites of political parties and companies and adding fangs to the faces of leaders 
in photographs online, and publishing data identifying top officials' security guards, Spanish police said. 

The operation, carried out after trawling through computer logs in order to trace IP addresses, also netted 10 suspects 
in Argentina, six in Chile and five in Colombia, Spanish police said. 

They said one of the suspects went by the nicknames Thunder and Pacotron and was suspected of running the 
computer network used by Anonymous in Spain and Latin America, via servers in the Czech Republic and Bulgaria. 

He was arrested in the southern Spanish city of Malaga. 

Two of the suspects were in detention while one was bailed and the fourth was a minor who was left in the care of his 
parents. 

In Santiago, deputy prefect Jaime Jara said police confiscated computer equipment belonging to five Chileans and a 
Colombian, aged between 17 and 23. 

Jara said the suspects appeared to have hacked web pages in Chile, Colombia and Spain. 

The six suspects did not know each other and were released after voluntarily giving statements, police said, though 
they will likely be ordered to appear in court to face possible charges relating to online crimes. 

Anonymous has in recent weeks targeted the websites of a series of police organisations, with subgroup "Antisec" on 
Friday vandalising the website of a major US prison contractor. 

Anonymous took credit Thursday for an online raid on the Los Angeles Police Canine Association and previously 
attacked websites of the Central Intelligence Agency and the Federal Bureau of Investigation. 

Anonymous has notably defended WikiLeaks when it was facing a funding cutoff and recently collaborated with the 
anti-secrecy site for the release of a swathe of emails from Texas-based private intelligence firm Stratfor. 

In December 2010, Anonymous attacked the websites of Mastercard, PayPal, Visa and others for blocking donations 
to WikiLeaks after it began releasing thousands of classified US diplomatic cables." 

END 

Regards, 

IP Washington 


i*** ************* *^ ************************************* ****** * 
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Case Number: 20120206910 
Date: 2/29/2012 1:51:31 PM 
Created By: f b >( 6 >. < b >( 7 )c 

Document Type: Note to File 



Hello, 


Please see below message from ' b,(7)d 


Th an ks , . 


(b)(6), (b)(7)c 


***QUOTE*** 


(b)(7)d 


(b)(6 ),(b)(7)(c) 
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(b)(7)d 


***END QUOTE*** 


(b)(6),(b)(7)(c) 

http://crmO 1:5552/CaseDocuments/2012/02/06910/0023 1 I htm 


6/21/2019 





Page 1 of 1 


Case Number:20120929587 
Created On:9/5/2012 6:37:02 PM 
Created By: 


The source of the Query is:USNCB 


The Query executed:(Anonymous Operation Hungary) OR (l 

b)(7)d 

(b)(7)d 



Result:Negative 
Result Text: 

Search Results were negative. 


(b)(6 ), (b)(7)(c) 
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PRIORITY: 

DATE: 

FROM: 

TO: 

OUR REF: 
SUBJECT: 


Non-Urgent 
10 September 2012 


Interpol Washington 



Dear Colleagues, 


We have received your referral (please see attached below for your ease of reference). 


Please be advised that we have forwarded your referral to a specialize cyber crime unit for additional review and 
possible action. Should we become informed of a result of this review, we will forward that information if it becomes 
available. 


Regards, 

IP Washington 


ATTACHMENT 


(b)(7)d 


(b)(6),( b)(7)(c) 
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PRIORITY: 

Non-Urgent 

DATE: 

10 September 2012 

FROM: 

Interpol Washington 

TO: 

(b)(6), (b)(7)c | 

OUR REF: 

20120929587| | <M(6MbH7Xt) 

SUBJECT: 

Referral from INTERPOlf b) < 7)d 

DearQ 

(b)(6),(b)(7)(c) 


Please see the attached referral from INTERPOL lb 1 concerning internet hacking. We do not have a letter of 

rogatory on this matter and do not expect to receive one. We are forwarding this information for whatever action you 
deem appropriate. 


Regards, 

(b)(6), (b)(7)c 


ATTACHMENT 


(b)(7)d 


|h)16).| l»)(7)|c) 
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PRIORITY: 

DATE: 

FROM: 

TO: 

OUR REF: 
SUBJECT: 


Non-Urgent 
4 December 2017 


Interpol Washington 
NCB lnterpol p^ 7 ) d 


2017123941 Qy j | (b)(6),(b)(7)(c) 


R e f;(b)(7)d 


Dear Colleague, 


In regards to your below mention request for information, your authorities will need to make a formal request for mutual 
legal assistance to the U.S. Central Authority for Mutual Legal Assistance, the Office of International Affairs in the U.S. 
Department of Justice. 

Regards, 

IP Washington 
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This mess39®^t|ylany attachments contain sensitive la^e^w^ffient information that 
should be protecte^l%^jnauthorized accessajjjfcBSGfnJnly for law enforcement 
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